This blog exists purely as a place for me to dump random links and thoughts I have rather than emailing them to my friends. It'll have large amounts of inside jokes. Also there will probably be times when I write "you" or refer to an email. Just pretend that you are reading an email to you. If you don't know me you likely won't find anything here interesting. If you do know me you also will not find anything here interesting.

Saturday, September 29, 2018

Recently I heard of the man in the browser attack and thought it was interesting. This is malware that is installed in your browser (as an extension for example), and silently waits for you to do a bank transfer. When you do it can simple change the to account and routing numbers you submit to that of the attacker. Everything looks fine to you, and wire transfers already take days to process. Things like strong passwords and 2 factor authentication won't help since you are logging into your real bank's website.